Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
File:                     97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (raw, json)
Hash identifier:          4XctQUWFz604o2YWrh4CHxCukYTthaIuf3hCU/ha0jc=
Subject key identifier:   52:36:22:98:54:01:14:39:A8:56:5D:0D:A3:0B:CE:45:62:D5:B3:71
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F4328584E5A49F972A42E68BD98ED3B80
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     33201
IP address blocks:        23.142.112.0/24 maxlen: 24
                          2602:800:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f9:72:a4:2e:68:bd:98:ed:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=e8d9fd0a-26eb-468c-930c-8149940e5543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:0a:a9:82:73:d5:fa:87:ac:4f:38:3d:1e:
                    e5:c9:ea:d6:47:2a:e6:24:80:40:71:ba:2d:15:d4:
                    0a:3b:62:df:f0:1f:6b:ff:91:98:48:bf:ca:32:fc:
                    e4:57:ba:bf:a1:fb:64:01:45:9b:b0:91:3c:28:39:
                    53:6d:50:54:b6:da:56:a4:10:62:30:d5:08:b0:57:
                    78:02:9c:49:2f:37:5e:e3:55:83:d6:82:fb:c1:c9:
                    b3:b9:fd:e1:53:69:86:95:38:4a:38:ae:bc:d5:d1:
                    47:64:bb:bb:69:d9:57:0d:2e:c0:b2:12:44:6c:5b:
                    bf:22:e1:3c:00:d3:0d:b4:33:eb:2d:32:04:f1:08:
                    14:9b:95:4c:bb:df:63:da:30:85:78:9e:10:66:51:
                    bd:db:29:1a:6e:18:ca:dd:7e:92:59:c5:73:cb:0c:
                    3a:77:7a:08:a2:2c:22:10:c2:21:9f:44:f9:c1:60:
                    18:1f:a9:81:6f:a7:5e:2f:e2:02:05:a1:74:1a:ca:
                    de:19:18:2e:25:f5:e7:db:e4:dd:75:04:09:a8:78:
                    2d:92:c4:29:33:e8:b9:1c:fa:48:0d:d5:a4:20:c7:
                    67:ac:f5:61:c8:99:c7:3e:79:80:bf:57:af:08:58:
                    37:eb:e5:c6:35:23:ea:28:41:02:bb:57:7d:8b:6e:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:22:98:54:01:14:39:A8:56:5D:0D:A3:0B:CE:45:62:D5:B3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.112.0/24
                IPv6:
                  2602:800:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:20:d7:6b:11:ad:b9:18:be:cb:01:8b:d0:69:da:54:47:85:
         27:d7:91:f5:c9:6c:71:09:f5:fc:fb:f8:5c:0b:48:cd:09:4c:
         c7:d2:ab:69:8b:f1:2c:6d:cb:03:0d:c6:b1:46:bf:70:7b:71:
         70:ef:01:4a:a5:33:78:97:8b:24:a8:a8:5b:36:48:e3:bd:c4:
         f8:96:2b:e9:3a:a4:8c:e2:62:8e:6f:32:c0:06:fe:28:31:66:
         32:61:6b:42:52:69:7d:1e:72:fc:39:42:5a:24:9b:f8:22:54:
         33:0c:f2:79:81:32:fe:d6:28:84:5d:89:8b:d4:b6:a2:30:24:
         b6:92:b8:2a:1d:ce:19:c4:01:0e:a3:1f:1e:46:c1:82:8e:0d:
         18:76:ad:d1:fd:fb:4a:06:e7:91:b0:85:a7:b9:b4:14:fe:3a:
         af:28:97:ee:17:6f:c2:91:52:df:68:f1:dd:27:e2:64:6a:44:
         12:8e:80:7c:bc:53:8b:81:16:cf:2e:e3:3c:4d:86:7b:96:99:
         d9:91:b9:0e:58:38:a7:f7:3e:bc:4b:66:71:f7:32:66:de:75:
         17:36:4e:2c:76:09:71:52:2b:3b:72:18:b7:35:70:ec:cd:c0:
         6d:a4:93:0f:2a:94:3e:bb:98:06:62:10:53:7c:c1:ef:8a:79:
         cf:13:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:55:16 2026 by rpki-client